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O Abstract 

Q In this comment, we show that the special attack [S.-J. Qin, F. Gao, Q.-Y. Wen, F.-C. Zhu, Opt. Commun. 281 (2008) 5472.], which 

CnJ claims to be able to obtain all the transmitted secret message bit values of the protocol of the multiparty quantum secret sharing of 

1—^ secure direct communication using single photons with random phase shift operations, fails. Furthermore, a class of similar attacks 

, ^ are also shown to fail to extract the secrete message. 
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i' In a recent paper, Qin et al. yj] pointed out that the HLLZ 

1 K protocol [2] is vulnerable to a special participant attack strategy 
Ch (hereafter called the QGWZ attack) where Alice's secret mes- 



a 



page can be extracted by any dishonest agent without any help 



pi^of the other agents. However, in this paper, we comment that 
I— —I ,some errors may exist in the QGWZ attack and thus it fails to 
attack HLLZ protocol successfully. 

►^ ' The six main stages of the HLLZ protocol are preparation 
QQ phase, encryption phase, the first detection, encoding phase, 
QQ recovery phase and the second detection^. In short, based 
C ■ on the linear property of the quantum random phase shift op- 
f^ erations (RPSOs) or equivalently random single-qubit rotations 
t^^ along the y-axis, the encryption, encoding and recovering phase 
^D of this protocol can be expressed as the addition/subtraction of 
^^ the rotation angles on each photon (qubit) at different stages; 



% 



U(dj) 



U{imjn/2) 



U(0j + 3mjn/2) 



m-Bj) 



U(3mjn/2). (1) 



Here U(0j) represents a rotation on photon j with 6j - 6bj + 
fc + • ■ ■ + dz , and 3mjjT/2 is the rotation angle made by Alice 
on the photon j according to the bit value nij = or 1 of her se- 
cret message m. The measurement action in the recovery phase 
by the agent (say Zach), to which Alice sent the photons with 
encoded message, reflects basically whether there is a rotation 
of an angle jR on the photon (qubit) j or not. If there is, the bit 
value of the message bit j is nij = 1 ; otherwise, irij = 0. 

Grasping the main steps of the HLLZ protocol, the scenario 
for an dishonest agent (say Charlie) in the QGWZ attack is to 
entangle the transmitted photons with prepared ancilla photons 
firstly, to escape from the detection secondly, and to attain the 
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secret message without being discovered lastly JM. However, 
the errors that existed in the Ref. [1] will doom Charlie to fail 
to extract the secret message even if he can escape from the 
detection. The first typo in Ref. |1] is in the last sentence of 
the first paragraph of step (E2) in the second column on page 
5473. The correct sentence for that should read as "Then Char- 
lie sends the fake sequence T to Alice.". In other words, the 
sequence that was sent out by Charlie is T rather than H stated 
in Ref. |jj]. But this typo is very minor as it is obvious from the 
subsequent description in Ref. Ill] that it is the T sequence that 
was sent out. 

The possible serious error is in the expression of Eq. (9) 
of Ref. iM which was derived from Eq. (7) of Ref. Uj] by a 
controlled-controlled-(-/cry) operation (referred to as CY oper- 
ation in 111]) with photons Hj and Tj being the control qubits 
and photon S j being the target qubit. The action of CY opera- 
tion on computational basis states is given by CF|f)|cl)|c2) = 
(-/cr,,)'^'®'^^|f)|cl)|c2), where cl and c2 represent the control 
qubits and t stands for the target qubit on which the -icr^ or 
eration acts. So the correct expression for Eq. (9) of Ref. 
should read as 
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l*P3>5,H,r> = ^(coseiO) - sin0|l))s,(|OO) + |11) - |01) ■ 



\10))hjTj. 
(2) 



Comparing Eq. (|2|l above with Eq. (10) of Ref. Uj], one can find 
that the two HjTj photon states in those two equations are iden- 
tical rather than orthogonal. The statement that the two states 
of photons HjTj are orthogonal in Ref. 1 1] comes from compar- 
ing the incon-ect Eq. (9) of Ref. LU with Eq. (10) of Ref. U. 
Therefore, Charlie cannot, by measuring photons HjTj, distin- 
guish the state l*!*?)^ h r ■ of the correct Eq. (|2]l from the state 

1*^3^5 HT ■ °f ^1- (10) of Ref. fl], and thus cannot extract Al- 
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ice's secret bit value in practice. As a result, the QGWZ attack 
fails to extract Alice's secret message bits from the HLLZ pro- 
tocol. 

The main idea of the QGWZ attack seems (i) to use an entan- 
glement operation to entangle each of the photon in sequence 
S with prepared ancilla photons to escape the first detection of 
the HLLZ protocol, (ii) to use the inverse entanglement opera- 
tion to separate the entangled states back to separable state to 
obtain the secret message and to escape the second detection of 
the HLLZ protocol. The particular entanglement operation in 
the Ref. UJ] is CY and we have shown that it fails to extract the 
secret message. One may wonder whether Charlie can extract 
the secret with other operations instead of CY in this QGWZ- 
like attack. In fact, we show below that Charlie will still fail 
to extract the secret even if he can apply other entanglement 
operations in the QGWZ-like attacks. Without loss of general- 
ity, suppose the photon j in the S sequence sent out by the last 
agent, Zach, is in the state 



\x}s^^cosej\0}s^+smej\l)s^. 



(3) 



where 0j = 9b +0c -^ 1- fe, ■ In this way, Charlie may prepare 

his ancilla qubits sequence A each in the state |e)^ , and apply a 
particular kind of entanglement operation E on \x}s such that 



E(\£)aj ® k)s,) = ^\^)a,Msj +/3\s^}A,[Umk)h,, (4) 

where \af- + \/3\^ = I and {s\s-^)^ = 0, and Uiff) is the rotation 
operation along the y axis defined in ([T]|. After these opera- 
tions, Charlie sends sequence S to AUce, and he may escape 
from Alice's first detection by telling the value of his rotation 
angle of either 6c or {6c + 6'). That is, when Alice selects the 
photon j to check the security of the quantum channel used, 
Charlie can first measure the corresponding ancilla qubit Aj in 
the {|e), Ifi-"-)) basis. He then announces his rotation angle of ei- 
ther 6c or {6c + 6') when the measured result is in |e> or in le-"-), 
respectively. As a result, Alice will not discover Charlie's dis- 
honest action during her first detection step. From this point of 
view, the QGWZ attack of Ref. yj] is just a simplified special 
case of above description where Charlie's E is the controlled- 
controlled-(-/cry) operation and the rotated phase shift angle 6' 
in Eq. (|4]i is -jtt. In short, Charlie hence can escape from the 
first detection in the HLLZ protocol with this QGWZ-like at- 
tack. 

After that, in the HLLZ protocol, Alice will encode her secret 
message bit value on each of the remaining photons in sequence 
S with a rotation operation along the 3'-axis by an angle of ^n if 
the bit value is 1 . Otherwise, no operation is performed if the bit 
value is 0. This message-encoding operation can be expressed 



following transformation. 

U{3k/2)\x}s^ = cos6j\l)s^-sm6j\0)s^ 

= cos{dj - -ttMs. + &m{0j - -n)\l}s. 
= cos6'j\Q}s.+sm0'j\l}s^ 

where 6'. - 6j - jn. Since U{3n/2) of Eq. (|5]l commutes with 
U{6') in Eq. (|4|l, the resultant state becomes 

a\s)A,W")s^ +/i\s^)A,[U(0')k")]s, (7) 

if Alice's secret message bit value is L Otherwise, if Alice's 
secret message bit value is 0, the resultant state remains in the 
state of Eq. dUi. 

After intercepting the transmitted photon again, Charlie will 
apply the inverse entanglement operation E'^^ to separate the 
entanglement between photon Aj and S j in the QGWZ-like at- 
tack. He then will try to figure out Alice's secret message by 
making an measurement on his ancilla qubits in the orthonor- 
mal basis of {|e), |e^)). Since E^^E - I, if Charlie applies the 
operator £ ' to Eq. (|4]i, the state of the photons Aj and S j will 
become 

E-\a\s)A^W}s, +/3\e^)A,[U{6')\x)]s,) = \e)A, ® Ms,- (8) 

It follows that if the operator £ ' is applied to Eq. (|7]i, it will 
become 

E-Ua\s}^^\x"}s^ +/S\s^}A,me')k'')]s,) = |e>A, ® \x%y (9) 

Since the photon state \e}A is the same in both Eq. ^ and 
Eq. ^, it is obvious that Charlie cannot distinguish whether 
the state of photon 5) has been rotated by an angle of jn or not 
from the measurement result of the ancilla photons Aj. Thus 
Charlie cannot extract the transmitted secret bits even if he 
can apply the entanglement operations defined in Eq. (|4]l in the 
QGWZ-like attacks. 

In summary, the QGWZ attack as well as the QGWZ-like 
attacks which apply entangled operations other than the CY op- 
eration fail to obtain the transmitted secret message bits of the 
HLLZ protocol. 
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t/(37r/2) = -/cr, = |1><0|-|0)<1|. 
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When it is applied to the state of Eq. (|4|, let us consider the 
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